<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div>It sounds like you're using the same subnet for management and service traffic, that would be the problem causing the split route. Give each vlan a unique subnet and traffic should flow correctly.<br><br>Michael<br>Sent from my iPhone</div><div><br>On Apr 7, 2016, at 8:52 AM, Schweiss, Chip <<a href="mailto:chip@innovates.com">chip@innovates.com</a>> wrote:<br><br></div><blockquote type="cite"><div><div dir="ltr">On several of my OmniOS hosts I have a setup a management interface for SSH access on an independent VLAN. There are service vlans attached to other nics.<div><br></div><div>The problem I am having is that when on privileged machine on one of the vlans also on the service side that has access to the management SSH port the TCP SYN comes in the management VLAN but the SYNACK goes out the service VLAN instead of routing back out its connecting port. This causes a split route and the firewall blocks the connection because the connection never appears complete.</div><div><br></div><div>Traffic is flowing like this:</div><div><font face="monospace, monospace">client firewall omnnios</font></div><div><font face="monospace, monospace">10.28.0.106 -> 10.28.0.254->10.28.125.254 -> 10.28.125.44</font></div><div><font face="monospace, monospace"><br></font></div><div><font face="monospace, monospace">10.28.0.106 <--------------------------------- 10.28.0.44 </font></div><div><br></div><div>How can I cause connections to only communicate on the vlan that the connection is initiated from? </div><div><br></div><div>I don't want to use the 10.28.0.44 interface because that is a virtual IP and will not always be on the same host.</div><div><br></div><div>-Chip</div><div><br></div><div><br></div></div>
</div></blockquote><blockquote type="cite"><div><span>_______________________________________________</span><br><span>OmniOS-discuss mailing list</span><br><span><a href="mailto:OmniOS-discuss@lists.omniti.com">OmniOS-discuss@lists.omniti.com</a></span><br><span><a href="http://lists.omniti.com/mailman/listinfo/omnios-discuss">http://lists.omniti.com/mailman/listinfo/omnios-discuss</a></span><br></div></blockquote></body></html>